Senior Software Engineer, Device Security

Box Box · Enterprise · Warsaw, Poland · Enterprise

Senior Software Engineer for Device Security team at Box, focusing on building and maintaining mission-critical enterprise software for trusted device access to their Intelligent Content Management platform. The role involves designing, developing, and owning key services end-to-end, driving architectural discussions, and collaborating with product and security teams to ensure high system availability, performance, and security for enterprise customers. Experience with large-scale systems, identity, authentication, and access control is required.

What you'd actually do

  1. Design, build, and maintain mission-critical enterprise software that enforces trusted access to Box from client devices and platforms like Web, Mobile and Desktop.
  2. Lead the development of software components in the authentication and secure access domain, ensuring they are resilient, performant, and secure.
  3. Build and own key services end-to-end—from architecture and design to implementation and deployment. Ensure high system availability and performance through observability, alerting and on-call support.
  4. Drive architectural discussions and help guide the evolution of Box’s security infrastructure.
  5. Collaborate closely with other engineers, product managers and security teams to define and deliver robust secure device management and access control capabilities over multiple-quarter long initiatives.

Skills

Required

  • Java
  • backend development
  • large-scale systems
  • mission-critical systems
  • identity
  • authentication
  • OAuth
  • access control
  • platform thinking
  • operating large-scale distributed systems
  • mentoring engineers
  • collaboration

Nice to have

  • enterprise security
  • authentication domains
  • zero trust models
  • device security posture management
  • Kubernetes
  • GCP
  • AWS
  • Azure
  • PHP
  • TypeScript
  • React
  • internal platforms
  • high reliability
  • compliance

What the JD emphasized

  • mission-critical enterprise software
  • authentication and secure access domain
  • high system availability and performance
  • security infrastructure
  • secure device management and access control
  • 10+ years of experience
  • mission-critical systems
  • identity, authentication, OAuth, or access control
  • Java
  • platforms
  • large-scale distributed systems
  • enterprise security or authentication domains
  • zero trust
  • device security posture
  • high reliability and compliance